CLAIMS 



What is claimed is: 



1 1. A method for securely creating an endorsement certificate for a device in an insecure 

2 environment, said method comprising: 

3 generating for a valid device an endorsement key pair that includes a private key and a 
' 4 public key, wherein said private key is not public readable; 

5 creating a non-public, signing key pair that is injected into a plurality of valid devices; 

6 verifying at a credential server that an endorsement key of a requesting device is a valid 

7 endorsement key generated during manufacture of said valid device by confirming a signature of 

8 said endorsement key is a public signing key of said signing key pair, wherein said credential 

9 server includes secure identification data of said non-public, signing key pair; and 

10 inserting an endorsement certificate into said device to indicate that said device is an 

1 1 approved device by an OEM (original equipment manufacturer) of the device only when said 

12 endorsement key is confirmed having been generated from within a valid device. 

1 2. The method of Claim 1, further comprising: 

2 providing a signing key certificate for said signing key pair, said signing key certificate 

3 including a public singing key of said signing key pair; and 

4 forwarding said signing key certificate via a secure communication medium to said 

5 credential server. 

1 3. The method of Claim 1, further comprising: 

2 signing said public key of the endorsement key pair with a public signing key of said 

3 signing key pair when creating the endorsement key (EK); and 

4 forwarding a resulting signed EK to said credential server to initiate a credential process. 

1 4. The method of Claim 3, further comprising: 

2 receiving said signed EK at said credential server; 
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3 comparing the public signing key within the signing key certificate with a signature from 

4 the signed EK; and 

5 when the public signing key matches the signature, confirming said EK as originating 
■ 6 from a valid device. 

1 5. The method of Claim 1, wherein following said verifying step said method further 

2 comprises: 

3 initially storing the credential in a database of said credential server; 

4 monitoring for a request from a customer to provide said certificate to said device; and 

5 following a receipt of said customer request, transmitting said certificate to said device to 

6 be inserted within the device. 

1 6. The method of Claim 1, wherein said endorsement certificate is once-writeable public- 

2 readable and is utilized for signing said public key during communication from and to said 

3 device. 

1 7. The method of Claim 1, wherein said signing key pair is a single-use parameter, said 

2 method further comprising immediately destroying said signing key pair within said device 

3 following a creation of said EK. 

1 8. The method of Claim 1, wherein said credential server is remotely located from a vendor 

2 manufacturing said device and said method comprises transmitting said signing key pair from 

3 said device to said credential server via a secure communication medium. 

1 9. The method of Claim 1, wherein the signing key pair is a first signing key pair that is 

2 provided to a first set of said plurality of valid devices and a second set of said plurality of valid 

3 devices are provided a second signing key pair, based on a pre-defined method for determining 

4 when to switch from use of said first signing key pair to said second signing key pair, said pre- 

5 defined method selected from among: 

6 expiration of a preset amount of device manufacturing time; and 
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7 manufacture of a preset number of devices during manufacture of the plurality of valid 

8 devices. 

1 10. The method of Claim 1, wherein said device is a trusted platform module (TPM). 

1 11. A TPM device manufactured and authenticated according to the steps of Claim 1 . 

1 12. A data processing system comprising: 

2 a processor; 

3 a trusted platform module (TPM) chip; 

4 a bus for interconnecting said processor and said TPM chip; 

5 a network interface with communication means for connecting said TPM to a secure 

6 credential server; and 

7 means whereby said TPM is able to verify an endorsement key pair of said TPM as being 

8 a valid pair generated during manufacture of said TPM by utilizing a signing key pair injected by 

9 a TPM vendor into the TPM during manufacture of the TPM. 

1 13. The data processing system of Claim 12, wherein said signing key pair has an associated 

2 signing key certificate that is sent to the secure credential server during manufacture of the TPM 

3 and said means for verifying an endorsement key pair further comprises: 

4 means for signing a public value of said endorsement key pair with a public signing key 

5 of said signing key pair to generate a signed EK; and 

6 means for forwarding said signed EK to said credential server, wherein said credential 



7 server returns an endorsement certificate only when the signed EK was generated within the 

8 TPM as confirmed by a comparison of the signed EK's public signing key with a public signing 

9 key of the signing key certificate. 

1 14. A data processing system utilized for issuing endorsement certificates, comprising: 

2 a processor; 

3 a memory couple to said processor via an interconnect; 
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4 a security mechanism for ensuring optimum security of processes within said data 

5 processing system; 

6 input/output mechanism for receiving a signing key certificate from a TPM vendor for 
* 7 utilization during a credential process for a specific group of manufactured TPM devices; and 

8 secure communication means for receiving an endorsement key (EK) requesting issuance 

9 of an endorsement certificate, wherein said EK comprises a public endorsement key signed by a 

10 public signing key; and 

1 1 program means for determining, by utilizing said public signing key and said signing key 

12 certificate, when said EK is an EK of an endorsement key pair that was generated within one of 

1 3 said manufactured TPM devices. 

1 15. The data processing system of Claim 14, further comprising means for generating a 

2 certificate only when said public signing key matches a public signing key within said signing 

3 key certificate. 

1 16. The data processing system of Claim 14, further comprising: 

2 recording when a request for an EK certificate fails; and 

3 tracking each failed request to identify TPM vendors with greater than a pre-established 

4 number of failures; and 

5 messaging said TPM vendors to update their security procedures. 

1 17. A system for securely creating an endorsement certificate for a TPM device in an 

2 insecure environment, said system comprising: 

3 means for generating for a valid device an endorsement key pair that includes a private 

4 key and a public key, wherein said private key is not public readable; 

5 means for creating a non-public, secure value that is provided to both a plurality of valid 

6 devices and a credential server; 

7 means for verifying at a credential server that an endorsement key of a requesting device 

8 is a valid endorsement key generated during manufacture of said valid device by confirming a 

9 signature of said endorsement key is a public signing key of said signing key pair, wherein said 
10 credential server includes secure identification data of said non-public, signing key pair; and 
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1 1 means for inserting an endorsement certificate into said device to indicate that said device 

12 is an approved device by an OEM (original equipment manufacturer) of the device only when 

13 said endorsement key is confirmed having been generated from within a valid device. 

1 18. The system of Claim 17, further comprising: 

2 means for providing a signing key certificate for said signing key pair, said^signing key 

3 certificate including a public singing key of said signing key pair; and 

4 means for forwarding said signing key certificate via a secure communication medium to 

5 said credential server. 

1 19. The system of Claim 18, further comprising: 

2 means for combining said public key of the endorsement key pair with a public signing 

3 key of said signing key pair when creating the endorsement key (EK); and 

4 means for forwarding a resulting signed EK to said credential server to initiate a 

5 credential process. 

1 20. The system of Claim 19, further comprising: 

2 means for receiving said EK at said credential server; 

3 means for comparing the copy of the public signing key within the signing key certificate 

4 with a signature from the signed EK; and 

5 means, when the public signing keys match, for confirming said EK as originating from a 

6 valid device. 

1 21. The system of Claim 17, wherein following said verifying said system further comprises: 

2 means for initially storing the credential in a database of said credential server; 

3 means for monitoring for a request from a customer to provide said certificate to said 

4 device; and 

5 means for following a receipt of said customer request, transmitting said certificate to 

6 said device to be inserted within the device. 
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1 22. The system of Claim 17, wherein said endorsement certificate is once-writeable and 

2 public-readable and is utilized for signing said public key during communication from and to 

3 said device. 

1 23. The system of Claim 17, wherein said signing key pair is a single-use parameter, said 

2 system further comprising means for immediately destroying said value within said device 

3 following a creation of said EK. 

1 24. The system of Claim 17, wherein said credential server is remotely located from a vendor 

2 manufacturing said device and said system comprises means for transmitting said signing key 

3 certificate from said device to said credential server via a secure communication medium. 

1 25. The system of Claim 17, wherein the signing key pair is a first signing key pair that is 

2 provided to a first set of said plurality of valid devices and a second set of said plurality of valid 

3 devices are provided a second signing key pair, based on a pre-defined system for determining 

4 when to switch from utilizing said first signing key pair to utilizing said second signing key pair, 

5 said pre-defined system selected from among: 

6 expiration of a preset amount of device manufacturing time; and 

7 manufacture of a preset number of devices from the plurality of valid devices. 
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